RHEL 5 : ipsec-tools (RHSA-2009:1036)

This script is Copyright (C) 2009-2017 Tenable Network Security, Inc.

Synopsis :

The remote Red Hat host is missing a security update.

Description :

An updated ipsec-tools package that fixes multiple security issues is
now available for Red Hat Enterprise Linux 5.

This update has been rated as having important security impact by the
Red Hat Security Response Team.

The ipsec-tools package is used in conjunction with the IPsec
functionality in the Linux kernel and includes racoon, an IKEv1 keying

A denial of service flaw was found in the ipsec-tools racoon daemon.
An unauthenticated, remote attacker could trigger a NULL pointer
dereference that could cause the racoon daemon to crash.

Multiple memory leak flaws were found in the ipsec-tools racoon
daemon. If a remote attacker is able to make multiple connection
attempts to the racoon daemon, it was possible to cause the racoon
daemon to consume all available memory. (CVE-2009-1632)

Users of ipsec-tools should upgrade to this updated package, which
contains backported patches to correct these issues. Users must
restart the racoon daemon for this update to take effect.

See also :


Solution :

Update the affected ipsec-tools package.

Risk factor :

Medium / CVSS Base Score : 5.0
CVSS Temporal Score : 4.3
Public Exploit Available : true

Family: Red Hat Local Security Checks

Nessus Plugin ID: 38819 ()

Bugtraq ID: 34765

CVE ID: CVE-2009-1574

Ready to Amp Up Your Nessus Experience?

Get Nessus Professional to scan unlimited IPs, run compliance checks & more

Buy Nessus Professional Now